File display method, device, equipment and readable storage medium
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- CHINA MOBILE FINANCIAL TECHNOLOGY CO LTD
- Filing Date
- 2026-03-17
- Publication Date
- 2026-08-07
AI Technical Summary
[0003]本申请实施例提供一种文件显示方法、装置、设备及可读存储介质，以解决当前密钥的保密性较差的问题
[0020] In this embodiment, since the target key is the key sent by the first server to the SIM card after the first server verifies the first identification information and the second identification information, the target key is only stored in the SIM card and not in any other location of the electronic device other than the SIM card. This reduces the probability of the target key being attacked and cracked, and improves the confidentiality of the target key storage. At the same time, the target file is decrypted by the SIM card using the target key, rather than by other components of the electronic device, which further enhances the confidentiality of the target key when decrypting the target file.
Smart Images
Figure CN122533779A_ABST
Abstract
Description
Technical Field
[0001] This application belongs to the field of communication technology, and specifically relates to a document display method, apparatus, device and readable storage medium. Background Technology
[0002] With the continuous development of digital technology, its application in people's lives is becoming increasingly widespread. Currently, documents can be viewed on electronic devices, making document retrieval more convenient. When a document is of high importance, it is usually encrypted. To facilitate reading on electronic devices, decryption keys are typically distributed to these devices. However, once the decryption key is distributed, its decryption and management become entirely dependent on the device. An attacker only needs a single successful crack to obtain this key, which can be used repeatedly and for a long time. If this key is leaked, the contents of all documents using the same key will be permanently compromised. Therefore, the current key security is relatively poor. Summary of the Invention
[0003] This application provides a file display method, apparatus, device, and readable storage medium to solve the problem of poor confidentiality of current keys.
[0004] To solve the above problems, this application is implemented as follows:
[0005] In a first aspect, embodiments of this application provide a document display method applied to a SIM card of an electronic device, the method comprising:
[0006] The system receives a target key sent by a first server. The target key is a key sent by the first server after verifying the first identification information and the second identification information sent by the first server to the player of the electronic device. The first identification information is the identification information of the target file, the second identification information is the identification information of the SIM card, and the target file is a file encrypted with the target key.
[0007] The target file is decrypted according to the target key, and a first message is sent to the player. The first message indicates that the decryption of the target file is complete, and the first message causes the player to display the decrypted target file.
[0008] Secondly, embodiments of this application provide a file display method applied to a player of an electronic device, the method comprising:
[0009] Upon receiving a first request to display a target file, first identification information and second identification information are sent to a first server. The first identification information is the identification information of the target file, and the second identification information is the identification information of the user identity recognition SIM card of the electronic device. The target file is a file encrypted with a target key.
[0010] If it is determined that the SIM card has decrypted the target file using the target key, the decrypted target file is displayed. The target key is the key sent by the first server to the SIM card after the first server has verified the first identification information and the second identification information.
[0011] Thirdly, embodiments of this application also provide a document display device for use with a SIM card in an electronic device, the document display device comprising:
[0012] The first receiving module is used to receive a target key sent by the first server. The target key is a key sent by the first server after verifying the first identification information and the second identification information sent by the player of the electronic device. The first identification information is the identification information of the target file, the second identification information is the identification information of the SIM card, and the target file is a file encrypted with the target key.
[0013] The second sending module is used to decrypt the target file according to the target key and send a first message to the player. The first message indicates that the decryption of the target file is complete and causes the player to display the decrypted target file.
[0014] Fourthly, embodiments of this application also provide a file display device for use as a player in an electronic device, the file display device comprising:
[0015] The first sending module is configured to send first identification information and second identification information to the first server upon receiving a first request for displaying a target file. The first identification information is the identification information of the target file, and the second identification information is the identification information of the user identity recognition SIM card of the electronic device. The target file is a file encrypted with a target key.
[0016] The display module is used to display the decrypted target file when it is determined that the SIM card has decrypted the target file using the target key. The target key is a key sent by the first server to the SIM card after the first server has verified the first identification information and the second identification information.
[0017] Fifthly, embodiments of this application also provide an electronic device, including: a memory, a processor, and a program stored in the memory and executable on the processor; the processor is configured to read the program in the memory to implement the steps in the method described in the first aspect above, or to read the program in the memory to implement the steps in the method described in the second aspect above.
[0018] In a sixth aspect, embodiments of this application also provide a readable storage medium for storing a program, which, when executed by a processor, implements the steps of the method described in the first aspect above, or implements the steps of the method described in the second aspect above.
[0019] In a seventh aspect, embodiments of this application also provide a computer program product, including computer instructions, which, when executed by a processor, implement the steps in the methods described in the first or second aspect above.
[0020] In this embodiment, since the target key is the key sent by the first server to the SIM card after the first server verifies the first identification information and the second identification information, the target key is only stored in the SIM card and not in any other location of the electronic device other than the SIM card. This reduces the probability of the target key being attacked and cracked, and improves the confidentiality of the target key storage. At the same time, the target file is decrypted by the SIM card using the target key, rather than by other components of the electronic device, which further enhances the confidentiality of the target key when decrypting the target file. Attached Figure Description
[0021] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the description of the embodiments of this application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0022] Figure 1 This is one of the flowcharts illustrating the document display method provided in the embodiments of this application;
[0023] Figure 2 This is a second schematic flowchart of the document display method provided in the embodiments of this application;
[0024] Figure 3 This is the third flowchart illustrating the document display method provided in this application embodiment;
[0025] Figure 4 This is the fourth flowchart illustrating the document display method provided in the embodiments of this application;
[0026] Figure 5 This is the fifth flowchart illustrating the document display method provided in the embodiments of this application;
[0027] Figure 6 This is the sixth flowchart illustrating the document display method provided in this application embodiment;
[0028] Figure 7 This is the seventh flowchart illustrating the document display method provided in the embodiments of this application;
[0029] Figure 8 This is the eighth flowchart illustrating the document display method provided in the embodiments of this application;
[0030] Figure 9 This is the ninth flowchart illustrating the document display method provided in the embodiments of this application;
[0031] Figure 10 This is the tenth flowchart illustrating the document display method provided in the embodiments of this application;
[0032] Figure 11 This is eleventh of the flowcharts illustrating the document display method provided in the embodiments of this application;
[0033] Figure 12 This is one of the structural schematic diagrams of the document display device provided in the embodiments of this application;
[0034] Figure 13 This is a second schematic diagram of the structure of the document display device provided in the embodiments of this application;
[0035] Figure 14 This is a schematic diagram of the structure of the electronic device provided in the embodiments of this application. Detailed Implementation
[0036] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0037] The terms "first," "second," etc., used in the embodiments of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to these processes, methods, products, or devices. Additionally, the use of "and / or" in this application indicates at least one of the connected objects, such as A and / or B and / or C, representing seven possibilities: including A alone, B alone, C alone, and the presence of both A and B, both B and C, both A and C, and the presence of A, B, and C.
[0038] Please see Figure 1 , Figure 1 This is a flowchart illustrating the document display method provided in an embodiment of this application. Figure 1 The file display method shown can be executed by the media player on an electronic device.
[0039] like Figure 1 As shown, the file display method may include the following steps:
[0040] Step 101: Upon receiving a first request to display a target file, send first identification information and second identification information to a first server. The first identification information is the identification information of the target file, and the second identification information is the identification information of the user identity recognition SIM card of the electronic device. The target file is a file encrypted with a target key.
[0041] The first request can be a request input by the user, but the specific input method of the first request is not limited here. Optionally, the player can display a start playback control, and the first request can be a request input by the user to the start playback control; alternatively, the first request can be a voice request input by the user to the player.
[0042] For example, the player can also display a payment link for the target file. When a successful payment based on the payment link is detected, a first request can be generated.
[0043] The specific type of the target file is not limited here. As an optional implementation, the target file includes at least one of the following: complete video, complete audio, document, image, video clip, and audio clip. This increases the diversity and flexibility of the target file, and also expands the application scenarios of the embodiments of this application.
[0044] The first identifier can be called V_ID, the second identifier can be called SEID, and the first server can be called the application server, or simply the server.
[0045] Optionally, when the target file includes a video, the aforementioned V_ID can be a unique identifier (Identity, ID) generated by the first server after the video uploader uploads the original video to the first server. At the same time, the first server can also generate a random key K_AES for each video, which can be understood as the target key.
[0046] Step 102: If it is determined that the SIM card has decrypted the target file using the target key, the decrypted target file is displayed. The target key is the key sent by the first server to the SIM card after the first server has verified the first identification information and the second identification information.
[0047] The specific method by which the player of the electronic device determines that the SIM card has decrypted the target file using the target key is not limited here. Optionally, after the SIM card has decrypted the target file using the target key, the SIM card can send a first message to the player, which indicates that the decryption of the target file is complete. Alternatively, the player can scan the status of the SIM card at preset intervals. When the preset identifier in the SIM card is the first identifier, it can be determined that the SIM card has completed the decryption of the target file using the target key. When the preset identifier in the SIM card is the second identifier, it can be determined that the SIM card has not yet completed the decryption of the target file. The aforementioned preset identifier is used to indicate whether the decryption of the target file is complete.
[0048] In this embodiment of the application, through steps 101 to 102, since the target key is the key sent by the first server to the SIM card after the first server has verified the first identification information and the second identification information, the target key is only stored in the SIM card and not in any other location of the electronic device other than the SIM card. This reduces the probability of the target key being attacked and cracked, and improves the confidentiality of the target key storage. At the same time, the target file is decrypted by the SIM card using the target key, rather than by other components of the electronic device, thereby further improving the confidentiality of the target key when decrypting the target file.
[0049] It's important to note that the decryption operation of the target file's decryption key (i.e., the target key) is moved from the electronic device environment to the physically isolated SIM card. The first server only sends the target key to the SIM card; the decryption is performed using the private key stored within the SIM card. The player has no access to any plaintext key. This reduces the probability of the target key being compromised and improves the confidentiality of its storage.
[0050] Furthermore, since the playback authorization for the target file is bound to the SIM card, even if the user changes electronic devices, playback can continue as long as the same SIM card is used, without the need to re-bind the device authorization. This avoids the problems of "failure due to changing electronic devices" or "frequent duplicate authorization" in related technologies. At the same time, as long as the SIM card is changed (such as copied, transferred, or counterfeited), the system can accurately identify and block playback, further enhancing the rigor and robustness of the target file's copyright protection.
[0051] As an optional implementation, the target key is a key obtained by the first server encrypting it with a first public key and then decrypting it with a first private key by the SIM card, wherein the first public key and the first private key constitute a key pair.
[0052] The first public key and the first private key can both be keys generated by the SIM card. That is, each SIM card independently generates and securely stores the key pair. The server uses the first public key to encrypt the target key, and only the corresponding SIM card can decrypt it using the first private key, which greatly improves the key security and the system's anti-cracking ability.
[0053] Optionally, the specific process for generating the first public key and the first private key can be found as follows:
[0054] The creator of the target file can share a purchase link for the target file. The electronic device can copy the purchase link and open the player. The player automatically reads the clipboard and obtains the purchase link. Then, the user can make a payment based on the purchase link through the electronic device. After the payment is successful, the player reads the SEID from the SIM card and sends the SEID and the first public key to the first server. The first server then strongly binds the video with the user's mobile phone number and the SEID of the SIM card.
[0055] For example: see Figure 2 , Figure 2The flowchart shows the generation process of SEID and the first public key. After successful payment, the SIM card can generate an RSA-2048-bit key pair, which includes PK_SIM (i.e., the first public key) and SK_SIM (i.e., the first private key). SK_SIM (i.e., the first private key) can be stored in the secure area of the SIM card. The player uploads PK_SIM (i.e., the first public key) and SEID to the SIM card management platform through the card-machine channel, and then forwards it to the first server. The first server uses PK_SIM (i.e., the first public key) to encrypt K_AES (the target key) to generate ciphertext E(K_AES) (i.e., the target key encrypted with the first public key), which is then bound and saved with the authorization.
[0056] It should be noted that the aforementioned SIM card management platform can be understood as a centralized service platform maintained by the telecommunications operator. It is responsible for managing the SIM card interface of the Super SIM card, as well as the interaction and information synchronization with the application server (i.e., the primary server). Thus, using the operator's SIM card management platform to remotely transmit information to the SIM card and application server can further enhance the control over the information transmission between the SIM card and the application server.
[0057] The primary server, also known as the application server, allows users to upload unencrypted videos (which can be any type of unencrypted target file). Encryption services are then used to encrypt the videos. Information about user video purchases is recorded for later verification. If a purchase is confirmed, decryption information is sent to the user via a SIM card channel. The encrypted videos are then stored on a cloud drive.
[0058] The SIM card, also known as a Super SIM card, interacts with the SIM card management platform and uploads the buyer's Super SIM's SEID. The media player can be understood as a dedicated player for playing encrypted target files; it's also a card application that interacts with the SIM card and can play decrypted target files.
[0059] In this embodiment of the application, when the target key is in the first server, the first server first encrypts it with the first public key. After receiving the target key encrypted with the first public key, the SIM card can decrypt the target key with the first private key. In this way, the confidentiality of the target key during transmission between the first server and the SIM card can be improved, that is, the security of the target key is further enhanced.
[0060] It should be noted that, for ease of explanation, the following content of the embodiments of this application will be illustrated by the example of the target file including video clips, and the video clips in the following text can be simply referred to as videos.
[0061] As an optional implementation, the target file includes the video segment, and the first identification information includes the index number of the video segment and the video identification information of the target video to which the video segment belongs. The step of displaying the decrypted target file after determining that the SIM card has decrypted the target file using the target key includes:
[0062] Send the index number and the video identification information to the SIM card;
[0063] The system receives a first key sent by the SIM card, wherein the first key is a key for the video segment, and the first key is calculated using the index number and the video identification information.
[0064] If it is determined that the SIM card has decrypted the target file using the target key to obtain the first file, the first file is decrypted using the first key, and the decrypted first file is displayed;
[0065] The first file is the file encrypted with the first key.
[0066] For example: see Figure 3 Each time the player plays a video segment, it sends the index i (i.e., index number) and V_ID (i.e., video identification information) of the video segment to the SIM card. The SIM card recalculates: K_enc,i = SHA-256(K_AES|| i || V_ID)[0:16]. The SIM card returns K_enc,i (i.e., the first key) to the player, which uses it to decrypt the corresponding video segment and play the video segment.
[0067] Optionally, when the player is playing a video clip, if the playback is completed or interrupted, the cached first key can be cleared directly, thereby further reducing the probability of the first key being attacked and cracked, and improving the confidentiality of the first key storage.
[0068] In this embodiment, a first file can be encrypted using a first key to obtain an encrypted first file. Then, a target key can be used to encrypt the encrypted first file again to obtain the target file. This further enhances the confidentiality of the target file. Furthermore, the first key is generated in real-time on demand by an internal algorithm of the SIM card, is valid only for the current video segment, and can be set with time / frequency limits to effectively prevent batch export or caching of keys, thereby further improving the confidentiality of the first key.
[0069] It should be noted that this implementation divides the complete video into multiple video segments, each of which can derive an independent encryption key (K_enc,i = SHA-256(K_AES || i || V_ID)), achieving finer-grained encryption. The playback terminal needs to request the first key for each segment and decrypt the corresponding file, thereby achieving independent authorization control for each segment, greatly increasing the difficulty of cracking and effectively preventing the entire content from being exported at once. Even if an attacker obtains partial segment keys, they will not be able to decrypt the complete video.
[0070] Furthermore, since the target file is encrypted using multiple layers, decryption can be achieved by first using the SIM card with the target key to decrypt the target file, obtaining the first file. Then, the first key is used to decrypt the first file, and the decrypted first file is displayed. This further enhances the confidentiality of the target file.
[0071] It should be noted that the generation and encryption processes of the first file can be found in the following description: [See...] Figure 4 When the target file includes video segments, the original video uploaded by the video uploader can be a complete video. The first server can split the original video to obtain multiple video segments (i.e., the first file that has not yet been encrypted with the first key). It can also generate an independent encryption key for each video segment, which can be the first key mentioned above. The first key can be represented as K_enc,i = SHA-256(K_AES || i || V_ID)[0:16], where i can be the segment index of the video segment (or is called the index number), and V_ID is the video identification information of the original video. In this way, the first file can be encrypted using the first key mentioned above, and the encrypted first file can be stored in the first server.
[0072] As an optional implementation, sending the index number and the video identification information to the SIM card includes:
[0073] Send a first Application Protocol Data Unit (APDU) to the SIM card, the first APDU including: the index number and the video identification information;
[0074] The first key sent by the SIM card is received, including:
[0075] Receive a second APDU sent by the SIM card, the second APDU being generated based on the first APDU, and the second APDU including the first key;
[0076] The second APDU is parsed to obtain the first key.
[0077] APDU is the basic instruction format and data packet structure for communication between a smart card (such as a SIM card, bank card, or NFC card) and a card reader (or terminal or host, such as a POS machine, mobile phone NFC module, PC card reader, or player). APDU can be understood as the "language" or "envelope" for communication between the host and the smart card.
[0078] For example, a card reader can send a command, such as a first APDU (Command APDU), to the smart card, such as "Please read your card number" or "Please sign this data with your private key." After receiving and executing the command, the smart card will return a response APDU, such as a second APDU. The second APDU contains the execution result or requested data, such as the card number, the signature result, and a status word to indicate whether the operation was successful.
[0079] It should be noted that APDUs can be divided into two types: command APDUs (e.g., the first APDU) and response APDUs (e.g., the second APDU).
[0080] The structure of the command APDU can be seen in Table 1 below:
[0081] Table 1
[0082]
[0083] Among them, Class (CLA): the category of command, used to distinguish different applications or protocols.
[0084] Description (Instruction, INS): The specific instruction code, such as 0xA4 for SELECT (select application) and 0x88 for INTERNAL AUTHENTICATE (internal authentication).
[0085] Parameter 1 (P1), P2: The parameters of the instruction, used to provide more detailed information.
[0086] Length of command data (Lc): This indicates the length of the Data field. This field does not exist if the command has no data.
[0087] Data: The specific data that the command needs to transmit, such as data that needs to be signed.
[0088] Length of expected response data (Le): Indicates the maximum length of data expected to be returned from the smart card.
[0089] The structure of the response APDU can be seen in Table 2 below:
[0090] Table 2
[0091]
[0092] Among them, Data refers to the data returned by the smart card, such as the content of a file read or the signature result.
[0093] Status Word 1 (SW1) and SW2: These two-byte status words must be returned. They represent the result of the command execution. For example:
[0094] 90 00: Indicates successful execution.
[0095] 6A 82: This indicates that the file was not found.
[0096] 69 85: Indicates that the usage conditions are not met (e.g., not certified).
[0097] Other values represent various errors or states.
[0098] In this embodiment, a first APDU is sent to the SIM card, and a second APDU is received from the SIM card. The second APDU is then parsed to obtain a first key. This further enhances the security of the first key during transmission between the SIM card and the player.
[0099] Furthermore, the SIM card and the player communicate via standard APDU commands to handle key uploads, segment key requests, and error feedback. The player cannot access the SIM card's keys without authorization; it can only initiate controlled requests segment by segment. Even if an attacker modifies the player or simulates requests, the SIM card's core logic of authorization verification and key calculation prevents it from obtaining a valid key, thus ensuring playback security.
[0100] To more fully illustrate the implementation methods of this application, a specific implementation method is given below as an example. For detailed steps, please refer to [link / reference needed]. Figure 6 :
[0101] 1. The player can construct a command APDU (i.e., the first APDU), which can include the following:
[0102] CLA: 0x80 (Custom command).
[0103] INS: 0x50 (Custom "decryption key" instruction).
[0104] P1, P2: 0x00, 0x00 respectively (representing default parameters).
[0105] Lc: The length of the “wrapped AES key”, such as 256 bytes.
[0106] Data: The “wrapped AES key” itself.
[0107] Le: Expected AES key length, such as 16 bytes.
[0108] 2. The player sends the first APDU to the SIM card.
[0109] 3. The security application in the SIM card receives the first APDU, parses out the instructions and data, and performs a decryption operation to obtain a 16-byte raw AES key.
[0110] 4. The SIM card constructs a response APDU (i.e., the second APDU) and returns it to the player. The second APDU may include the following:
[0111] Data: 16-byte raw AES key.
[0112] SW1, SW2: 90 00 (indicating success).
[0113] 5. The player receives the second APDU, parses out the Data portion (i.e., the AES key) and the status word. Upon seeing 90 00, it knows the operation was successful and it can begin decrypting the video using the first key.
[0114] It should be noted that, in order to fully illustrate the above embodiments, a specific embodiment will be used as an example below. For details, please refer to [link / reference needed]. Figure 5 The user sends a first request to the application server via the player to play an encrypted video. The player also transmits the SEID and V_ID to the application server. Upon receiving the first request, the application server verifies whether the SEID has playback permission for the video ID. If the verification passes, the application server sends the target key E (K_AES) to the SIM card of the electronic device through a secure SIM card channel. The SIM card uses SK_SIM to decrypt the key, obtaining K_AES, which is not publicly visible. See also... Figure 7 , Figure 7 A flowchart of a complete embodiment provided in this application is available for reference. Figure 7 As shown.
[0115] In addition, to more fully illustrate the above embodiments, three specific embodiments are given below as examples:
[0116] Example 1
[0117] See Figure 8 If a user has never purchased an encrypted video but obtains it from a pirated source and attempts to play it, although the user has obtained the encrypted video file, the player will read the SEID of the SIM card before playback and request playback authorization from the server. The server will verify through the SIM card management platform that the SEID has no record of purchasing the video (i.e., the verification of the first and second identification information fails), and therefore will not issue the AES key (i.e., the target key) required for decryption. The player will not be able to obtain the decryption key, playback will fail, and the user will be prompted with "not purchased / no permission".
[0118] Example 2
[0119] See Figure 9 Although the user has purchased a certain encrypted video, they obtained an encrypted video they did not purchase from a pirated channel and attempted to play it; although the user has purchased some encrypted videos, the encrypted video they attempted to play this time was not purchased through legitimate channels; the player reads the SIM card SEID and requests authorization from the server, but the server verifies that the SEID has no record of purchasing the video (i.e., the verification of the first and second identification information fails); the server will not issue the AES key (i.e., the target key) for the video, the player cannot decrypt it, playback fails, and the message "not purchased / no permission" is displayed.
[0120] Example 3
[0121] See Figure 10 Although the user purchased a certain encrypted video, they changed their phone and the SIM card number was not the one used to purchase the video. The user changed their phone and SIM card. Although they still have the purchased encrypted video file, the SEID of the new SIM card is different from the SEID bound to the original purchase. The player reads the new SIM card SEID and requests authorization from the server. The server verifies that the new SEID has no record of purchasing the video (i.e., the verification of the second identification information fails). The server will not issue the AES key (i.e., the target key). The player cannot decrypt the video, playback fails, and the message "Not purchased / No permission" is displayed.
[0122] As can be seen, the player cannot play encrypted videos in any of the three use cases mentioned above, which significantly improves the confidentiality of encrypted video playback.
[0123] Please see Figure 11 , Figure 11 This is a flowchart illustrating the document display method provided in an embodiment of this application. Figure 11 The document display method shown can be executed by the SIM card of an electronic device. It should be noted that the embodiments in this application are similar to those described above. Figure 1 The corresponding embodiments differ in that the execution subject is different; in the above embodiments, the execution subject is the player of the electronic device, while in the embodiments of this application, the execution subject is the SIM card of the electronic device. Therefore, the technical features of the embodiments of this application can be found in the corresponding descriptions in the above embodiments, and will not be repeated here.
[0124] like Figure 11 As shown, the file display method may include the following steps:
[0125] Step 1101: Receive the target key sent by the first server. The target key is a key sent by the first server after verifying the first identification information and the second identification information sent by the player of the electronic device. The first identification information is the identification information of the target file, the second identification information is the identification information of the SIM card, and the target file is a file encrypted with the target key.
[0126] The verification of the first and second identification information sent by the player of the electronic device by the first server can be understood as follows: the first server may have pre-stored the first and second identification information. When the first server receives the first and second identification information sent by the player of the electronic device, it can match the received first and second identification information sent by the player of the electronic device with the pre-stored first and second identification information respectively. If both match, it is determined that the verification of the first and second identification information sent by the player of the electronic device is successful; otherwise, the verification fails.
[0127] Step 1102: Decrypt the target file according to the target key and send a first message to the player. The first message indicates that the target file has been decrypted and causes the player to display the decrypted target file.
[0128] In this embodiment of the application, through steps 1101 to 1102, the SIM card of the electronic device can decrypt the target file according to the target key, and after the target file is decrypted, it sends a first message to the player. In this way, the target key is stored in the SIM card, and the decryption process of the target file is completed by the SIM card, thereby reducing the probability of the target key being attacked and cracked, and improving the confidentiality of the target key storage.
[0129] As an optional implementation, the target key is a key encrypted by the first server using a first public key, and the decryption of the target file based on the target key includes:
[0130] Obtain the stored first private key; the first public key and the first private key constitute a key pair.
[0131] The target key is decrypted using the first private key to obtain the decrypted target key;
[0132] The target file is decrypted using the decrypted target key.
[0133] In this embodiment, since the target key is a key encrypted with the first public key, the target key needs to be decrypted with the first private key before the target file is decrypted. Then, the target file is decrypted using the decrypted target key. This can further improve the confidentiality of the target key and also enhance the confidentiality of the target file.
[0134] As an optional implementation, before obtaining the stored first private key, the method further includes:
[0135] Generate a key pair consisting of the first public key and the first private key;
[0136] Send the first public key to the first server and store the first private key in the secure area of the SIM card.
[0137] The secure area of a SIM card can be understood as the area within the SIM card used to store information with high confidentiality requirements. Electronic devices cannot read the information stored in the secure area of the SIM card without authorization, thus ensuring the security and confidentiality of the first private key.
[0138] In this embodiment of the application, since the first private key is stored in the secure area of the SIM card, the security of the first private key storage can be improved.
[0139] See Figure 12 , Figure 12 This is a structural diagram of a file display device provided in an embodiment of this application. The file display device is used as a player in an electronic device, such as... Figure 12 As shown, the document display device 1200 includes:
[0140] The first sending module 1201 is used to send first identification information and second identification information to the first server when it receives a first request for displaying a target file. The first identification information is the identification information of the target file, and the second identification information is the identification information of the user identity recognition SIM card of the electronic device. The target file is a file encrypted with a target key.
[0141] Display module 1202 is used to display the decrypted target file when it is determined that the SIM card has decrypted the target file using the target key. The target key is a key sent by the first server to the SIM card when the first server verifies the first identification information and the second identification information.
[0142] As an optional implementation, the target key is a key obtained by the first server encrypting it with a first public key and then decrypting it with a first private key by the SIM card, wherein the first public key and the first private key constitute a key pair.
[0143] As an optional implementation, the target file includes at least one of the following: a complete video, a complete audio file, a document, an image, a video clip, or an audio clip.
[0144] As an optional implementation, the target file includes the video segment, and the first identification information includes the index number of the video segment and the video identification information of the target video to which the video segment belongs. The display module 1202 includes:
[0145] A sending submodule is used to send the index number and the video identification information to the SIM card;
[0146] The receiving submodule is used to receive a first key sent by the SIM card. The first key is a key for the video segment, and the first key is calculated by the index number and the video identification information.
[0147] The first decryption submodule is used to decrypt the first file using the first key and display the decrypted first file when it is determined that the SIM card has already decrypted the target file using the target key to obtain the first file;
[0148] The first file is the file encrypted with the first key.
[0149] As an optional implementation, the transmitting submodule is further configured to transmit a first application protocol data unit (APDU) to the SIM card, the first APDU including: the index number and the video identification information;
[0150] The receiving submodule includes:
[0151] A receiving unit is configured to receive a second APDU sent by the SIM card, wherein the second APDU is generated based on the first APDU and includes the first key;
[0152] The parsing unit is used to parse the second APDU to obtain the first key.
[0153] The document display device 1200 can realize the embodiments of this application. Figure 1 The various processes of the method embodiments shown, and the same beneficial effects achieved, will not be described again here to avoid repetition.
[0154] See Figure 13 , Figure 13 This is a structural diagram of a file display device provided in an embodiment of this application. The file display device is applied to a SIM card in an electronic device, such as... Figure 13 As shown, the document display device 1300 includes:
[0155] The first receiving module 1301 is used to receive a target key sent by the first server. The target key is a key sent by the first server when the first identification information and the second identification information sent by the player of the electronic device are verified. The first identification information is the identification information of the target file, the second identification information is the identification information of the SIM card, and the target file is a file encrypted with the target key.
[0156] The second sending module 1302 is used to decrypt the target file according to the target key and send a first message to the player. The first message indicates that the decryption of the target file is complete and causes the player to display the decrypted target file.
[0157] As an optional implementation, the target key is the key encrypted by the first server using the first public key, and the second sending module 1302 includes:
[0158] The acquisition submodule is used to acquire the stored first private key, and the first public key and the first private key constitute a key pair;
[0159] The second decryption submodule is used to decrypt the target key using the first private key to obtain the decrypted target key;
[0160] The third decryption submodule is used to decrypt the target file using the decrypted target key.
[0161] As an optional implementation, the document display device 1300 further includes:
[0162] A generation module is used to generate a key pair consisting of the first public key and the first private key;
[0163] The third sending module is used to send the first public key to the first server and store the first private key in the secure area of the SIM card.
[0164] The document display device 1300 can realize the embodiments of this application. Figure 11 The various processes of the method embodiments shown, and the same beneficial effects achieved, will not be described again here to avoid repetition.
[0165] This application also provides an electronic device. Please refer to [link to relevant documentation]. Figure 14 The electronic device may include a processor 1401, a memory 1402, and a program 14021 stored in the memory 1402 and executable on the processor 1401. When the electronic device includes a player, the program 14021, when executed by the processor 1401, can achieve... Figure 1 The steps in the corresponding method embodiments and the achievement of the same beneficial effects will not be repeated here; when the electronic device includes a SIM card, when program 14021 is executed by processor 1401, it can achieve the corresponding functions on the server described above. Figure 11 Any steps in the method embodiments shown, and the same beneficial effects achieved, will not be repeated here.
[0166] Those skilled in the art will understand that all or part of the steps of the methods described in the above embodiments can be implemented by hardware related to program instructions, and the program can be stored in a readable medium. This application also provides a readable storage medium storing a computer program, which, when executed by a processor, can implement the above-described methods. Figure 1 or Figure 11 Any step in the corresponding method embodiment can achieve the same technical effect, and will not be repeated here to avoid repetition.
[0167] The storage medium may be a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.
[0168] This application also provides a computer program product, including computer instructions, which, when executed by a processor, can perform the above-described functions. Figure 1 or Figure 11 Any step in the corresponding method embodiment can achieve the same technical effect, and will not be repeated here to avoid repetition.
[0169] The above description represents the preferred embodiments of this application. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles described in this application, and these improvements and modifications should also be considered within the scope of protection of this application.
Claims
1. A method for displaying a file, characterized in that, The method includes: (The SIM card is used in an electronic device.) The system receives a target key sent by a first server. The target key is a key sent by the first server after verifying the first identification information and the second identification information sent by the first server to the player of the electronic device. The first identification information is the identification information of the target file, the second identification information is the identification information of the SIM card, and the target file is a file encrypted with the target key. The target file is decrypted according to the target key, and a first message is sent to the player. The first message indicates that the decryption of the target file is complete, and the first message causes the player to display the decrypted target file.
2. The method according to claim 1, characterized in that, The target key is the key encrypted by the first server using the first public key. Decrypting the target file based on the target key includes: Obtain the stored first private key; the first public key and the first private key constitute a key pair. The target key is decrypted using the first private key to obtain the decrypted target key; The target file is decrypted using the decrypted target key.
3. The method according to claim 2, characterized in that, Before obtaining the stored first private key, the method further includes: Generate a key pair consisting of the first public key and the first private key; Send the first public key to the first server and store the first private key in the secure area of the SIM card.
4. A method for displaying a file, characterized in that, A player applied to an electronic device, the method comprising: Upon receiving a first request to display a target file, first identification information and second identification information are sent to a first server. The first identification information is the identification information of the target file, and the second identification information is the identification information of the user identity recognition SIM card of the electronic device. The target file is a file encrypted with a target key. If it is determined that the SIM card has decrypted the target file using the target key, the decrypted target file is displayed. The target key is the key sent by the first server to the SIM card after the first server has verified the first identification information and the second identification information.
5. The method according to claim 4, characterized in that, The target file includes video clips, and the first identification information includes the index number of the video clip and the video identification information of the target video to which the video clip belongs. The step of displaying the decrypted target file after determining that the SIM card has decrypted the target file using the target key includes: Send the index number and the video identification information to the SIM card; The system receives a first key sent by the SIM card, wherein the first key is a key for the video segment, and the first key is calculated using the index number and the video identification information. If it is determined that the SIM card has decrypted the target file using the target key to obtain the first file, the first file is decrypted using the first key, and the decrypted first file is displayed; The first file is the file encrypted with the first key.
6. The method according to claim 5, characterized in that, Sending the index number and the video identifier information to the SIM card includes: Send a first application protocol data unit (APDU) to the SIM card, wherein the first APDU includes: the index number and the video identification information; The first key sent by the SIM card is received, including: Receive a second APDU sent by the SIM card, the second APDU being generated based on the first APDU, and the second APDU including the first key; The second APDU is parsed to obtain the first key.
7. The method according to claim 4, characterized in that, The target key is a key obtained by the first server encrypting it with the first public key and then decrypting it with the first private key by the SIM card. The first public key and the first private key constitute a key pair.
8. The method according to claim 4, characterized in that, The target file includes at least one of the following: complete video, complete audio, document, image, video clip, and audio clip.
9. A document display device, characterized in that, A SIM card used in electronic devices, the document display device comprising: The first receiving module is used to receive a target key sent by the first server. The target key is a key sent by the first server after verifying the first identification information and the second identification information sent by the player of the electronic device. The first identification information is the identification information of the target file, the second identification information is the identification information of the SIM card, and the target file is a file encrypted with the target key. The second sending module is used to decrypt the target file according to the target key and send a first message to the player. The first message indicates that the decryption of the target file is complete and causes the player to display the decrypted target file.
10. A document display device, characterized in that, A media player for electronic devices, the file display device comprising: The first sending module is configured to send first identification information and second identification information to the first server upon receiving a first request for displaying a target file. The first identification information is the identification information of the target file, and the second identification information is the identification information of the user identity recognition SIM card of the electronic device. The target file is a file encrypted with a target key. The display module is used to display the decrypted target file when it is determined that the SIM card has decrypted the target file using the target key. The target key is a key sent by the first server to the SIM card after the first server has verified the first identification information and the second identification information.
11. An electronic device, comprising: A memory, a processor, and a program stored in the memory and executable on the processor; characterized in that the processor is configured to read the program in the memory to implement the steps of the file display method as described in any one of claims 1 to 5, or the processor is configured to read the program in the memory to implement the steps of the file display method as described in any one of claims 6 to 8.
12. A readable storage medium for storing a program, characterized in that, When the program is executed by the processor, it implements the steps of the file display method as described in any one of claims 1 to 5, or, when the program is executed by the processor, it implements the steps of the file display method as described in any one of claims 6 to 8.
13. A computer program product, characterized in that, The method includes computer instructions that, when executed by a processor, implement the steps in the file display method as described in any one of claims 1 to 5, or, when executed by a processor, implement the steps in the file display method as described in any one of claims 6 to 8.